- AI Fuels 55% of Africa’s Cybercrime as Losses Surge to US$484m – INTERPOL Warns
Artificial intelligence has become a defining force behind Africa’s rapidly changing cybercrime landscape, with 55.00% of reported cybercrime cases now involving AI, as criminals use automated tools to scale attacks, impersonate victims and circumvent increasingly sophisticated digital-security systems, according to the INTERPOL African Cyberthreat Assessment Report 2026.
The financial consequences are becoming significantly more severe. Cybercrime-related losses across Africa have increased from US$192.00 million in 2024 to US$484.00 million, representing a rise of about 152.08%, as AI-enabled fraud, credential theft and automated social-engineering attacks increasingly target businesses, banks, telecommunications companies and individual consumers.
The findings suggest that Africa’s cybercrime problem is evolving from fragmented criminal activity into a highly organised cross-border industry capable of exploiting both new technology and weaknesses within rapidly expanding digital ecosystems.
AI is accelerating that transformation.
Cybercriminals can now use generative tools to produce more convincing phishing emails, replicate legitimate corporate communications, generate synthetic identities and automate fraudulent interactions at a scale that would previously have required much larger criminal networks.
That capability dramatically lowers the operational cost of fraud while allowing attackers to target thousands of potential victims simultaneously.
INTERPOL’s warning comes as Africa’s digital economy continues to expand rapidly, supported by more than 1.10 billion mobile subscribers in 2025 and growing adoption of mobile money, internet banking, e-commerce and digital public services.
Greater connectivity is delivering substantial economic benefits, including wider financial inclusion and easier access to markets, but it is simultaneously expanding the attack surface available to cybercriminals.
The institutional response has not always kept pace.
INTERPOL identifies fragmented cybercrime legislation, insufficient AI expertise among investigators, limited digital-forensic capacity and weak coordination between agencies as significant vulnerabilities across parts of the continent.
Those gaps are particularly serious because modern cybercrime rarely respects national borders.
A phishing operation targeting a Ghanaian bank customer, for example, could use infrastructure hosted in another continent, involve stolen identity data obtained elsewhere and move funds through several jurisdictions before the victim realises that an attack has occurred.
Online scams remain the continent’s most prevalent category of cybercrime.
Nearly three-quarters of countries surveyed reported organised scam centres operating within or affecting their jurisdictions, with particular concentration across West and Southern Africa.
These operations increasingly combine social media, mobile money platforms and AI-generated communications to create highly personalised fraud schemes.
Unlike earlier phishing attacks that were often identifiable through spelling mistakes or obviously fraudulent messages, AI-generated communications can closely replicate the tone, branding and language of legitimate organisations.
The rise of synthetic identities adds another dimension.
Criminals can combine genuine personal information with fabricated digital credentials to construct identities capable of passing some verification procedures. Such profiles can then be used to open bank accounts, register SIM cards, secure digital loans or establish accounts through which stolen funds can be transferred.
That creates potential risks not only for individual institutions but also for financial stability, because weaknesses in digital identity verification can undermine trust across interconnected financial platforms.
Business Email Compromise attacks are similarly becoming more sophisticated.
Africa-based criminal actors are increasingly deploying AI-generated emails to impersonate company executives, suppliers or business partners and manipulate employees into authorising fraudulent payments.
The geographical reach of those attacks has expanded beyond Africa, with corporations and individuals in Europe and North America also being targeted through globally distributed digital infrastructure.
A major weakness identified by INTERPOL is the absence of sufficiently rapid information sharing between banks, telecom operators and law-enforcement agencies.
Cybercrime often moves faster than conventional reporting structures.
By the time suspicious transactions are escalated between institutions, funds may already have been transferred across several accounts, converted into other assets or moved outside the jurisdiction.
Real-time or near-real-time intelligence sharing could therefore become increasingly important.
Banks may identify unusual transactions, telecom operators may detect SIM-related anomalies and law enforcement may hold intelligence on known criminal networks, but the value of that information declines significantly when institutions operate in isolation.
The report nevertheless identifies progress.
During 2025, 17 African countries enacted or strengthened cybercrime legislation, suggesting governments increasingly recognise the scale of the threat.
INTERPOL-coordinated operations including Serengeti 2.0, Contender 3.0, Sentinel and Red Card 2.0 resulted in more than 1,500 arrests, the seizure of hundreds of electronic devices and recovery of more than US$100.00 million in illicit proceeds.
Those enforcement successes demonstrate the potential impact of coordinated regional action, but the scale and speed of AI-powered cybercrime suggest enforcement alone will not be sufficient.
African governments will increasingly need to invest in digital-forensic laboratories, specialist cybercrime units and AI literacy among investigators, prosecutors and judges.
Financial institutions and telecommunications companies will also need stronger behavioural analytics, fraud-detection systems and authentication technologies capable of identifying unusual patterns rather than relying exclusively on passwords, one-time codes or static personal information.
Public education remains equally important.
AI can make fraudulent communications more believable, meaning consumers can no longer assume that a professionally written message, familiar voice or convincing video necessarily comes from the person or institution it claims to represent.
Africa’s digital transformation therefore faces a new strategic challenge.
Connectivity, mobile money and digital services have become critical infrastructure for economic growth, but the systems underpinning that expansion must now be defended against criminals using many of the same technologies driving innovation.
INTERPOL’s assessment ultimately suggests that Africa’s next digital frontier will be defined not only by how quickly it adopts artificial intelligence, but by how effectively governments, businesses and law-enforcement agencies prevent AI from becoming an equally powerful engine of financial crime.
